$ rpki-client -vvf rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft File: oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft (raw, json) Hash identifier: lN3jL6ltud0cHiB8bvjxEX/bSe6oiPeA1c/LgluakU0= Subject key identifier: 96:A4:58:D9:81:23:55:34:B8:5D:9D:13:3B:74:3C:41:2A:D1:B9:25 Authority key identifier: A0:FA:66:F6:93:4A:A2:81:3E:1A:1F:00:73:95:90:C6:35:7D:40:DA Certificate issuer: /CN=A91F5804/serialNumber=A0FA66F6934AA2813E1A1F00739590C6357D40DA Certificate serial: 0198 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft Manifest number: 0192 Signing time: Mon 03 Nov 2025 03:28:06 +0000 Manifest this update: Mon 03 Nov 2025 03:28:05 +0000 Manifest next update: Mon 10 Nov 2025 03:28:05 +0000 Files and hashes: 1: oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl (hash: FMd6aStdOyzuFopkvb73dr7g+Ggjl6EX74FGOecn/Bw=) 2: 599F65C652C011EEAAE0CD34C4F9AE02.roa (hash: RkTUA678ggeVul1y+nwQF7cmzTi/KyCvH3jL9UTL73c=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 10 Nov 2025 03:28:05 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 408 (0x198) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91F5804, serialNumber=A0FA66F6934AA2813E1A1F00739590C6357D40DA Validity Not Before: Nov 3 03:28:05 2025 GMT Not After : Nov 10 03:28:05 2025 GMT Subject: CN=69082145-cdb4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:73:04:46:c4:7b:78:8f:1d:45:32:4f:a7:1e: 53:76:27:f7:ae:b6:5f:f5:b0:a9:f3:c1:44:e6:29: 79:c8:3d:c1:c2:aa:1e:b1:70:4d:fa:0b:fa:d6:b7: 28:1e:13:45:85:7d:30:12:1b:41:47:62:c9:ab:cf: b7:5d:63:3a:d9:03:c9:fd:79:49:48:fe:7d:b4:06: 0f:e2:73:3b:5b:1d:3e:79:58:b7:7f:86:9b:1b:de: c3:d0:38:c6:1e:ca:20:cc:c8:46:61:fc:5f:d8:02: 6c:6f:da:df:40:47:c3:f8:73:8e:7a:ed:f2:b4:ec: 06:dc:94:89:89:65:e9:57:22:54:a1:64:ca:a0:33: 09:68:6b:43:f7:a4:7a:48:b7:51:b0:95:f2:10:b1: d2:d2:93:fb:27:90:b6:ec:63:e0:43:11:a5:f8:a6: 04:f0:98:12:6c:7a:69:f0:45:a4:d5:c2:7f:6a:73: 88:03:c0:53:c8:98:41:9a:50:b1:ee:94:95:f9:23: e0:9d:a2:32:c9:bf:d9:01:68:78:10:37:65:37:0e: 09:4e:b7:ce:7c:12:d0:78:c3:d3:e7:98:e8:8b:27: 91:72:4e:c2:7c:ca:b3:22:df:7d:a0:46:7d:1b:7f: 52:5a:c9:89:8b:e0:7a:aa:e9:5d:1c:39:12:e5:92: f2:ed Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 96:A4:58:D9:81:23:55:34:B8:5D:9D:13:3B:74:3C:41:2A:D1:B9:25 X509v3 Authority Key Identifier: keyid:A0:FA:66:F6:93:4A:A2:81:3E:1A:1F:00:73:95:90:C6:35:7D:40:DA X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91F5804/C2138D4052BF11EE8E44AA1BC4F9AE02/oPpm9pNKooE-Gh8Ac5WQxjV9QNo.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 86:87:8d:38:c8:3b:a0:66:9a:9b:64:66:2e:ef:fa:03:04:3e: f2:cd:59:d7:7e:8f:b2:88:94:cd:df:de:85:e0:d9:ed:95:ff: a4:42:59:07:16:ef:b4:9a:b4:3b:4c:b9:f9:31:6a:dd:0f:89: 0e:b5:93:06:11:65:75:5d:b5:75:4c:d9:33:01:b2:d3:1e:d6: f7:48:a9:53:59:39:b9:82:1c:ae:38:39:93:02:ac:6e:96:d6: 1a:18:e4:fd:d5:d7:ee:92:0f:4e:52:e9:81:6e:b7:db:b8:d7: 48:cd:16:00:d7:f3:a6:10:6a:b8:cd:e5:a5:df:9b:42:97:90: c7:ab:c3:82:e6:e5:5e:fc:ad:4e:1a:35:f7:2a:3b:8f:8d:11: 64:50:21:6f:d6:ce:97:f6:79:fb:98:95:02:99:e9:d9:05:d9: f1:2e:4e:00:c8:65:38:ca:9d:b7:dc:67:ec:8c:db:00:62:8e: 25:fb:41:eb:e0:0f:47:8f:11:28:48:2a:b7:ad:26:2b:a9:13: ec:f6:71:8d:79:5f:a3:50:56:63:df:e7:8c:1e:aa:9a:b7:5b: c6:d1:c1:fd:30:97:3f:d1:fc:af:dd:c4:86:86:aa:c0:a5:06: 9c:77:c9:87:8b:31:78:06:14:fb:ae:ff:2b:ff:a8:7e:49:98: 23:93:4e:8f -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAZgwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx RjU4MDQxMTAvBgNVBAUTKEEwRkE2NkY2OTM0QUEyODEzRTFBMUYwMDczOTU5MEM2 MzU3RDQwREEwHhcNMjUxMTAzMDMyODA1WhcNMjUxMTEwMDMyODA1WjAYMRYwFAYD VQQDEw02OTA4MjE0NS1jZGI0MIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAtnMERsR7eI8dRTJPpx5Tdif3rrZf9bCp88FE5il5yD3BwqoesXBN+gv61rco HhNFhX0wEhtBR2LJq8+3XWM62QPJ/XlJSP59tAYP4nM7Wx0+eVi3f4abG97D0DjG HsogzMhGYfxf2AJsb9rfQEfD+HOOeu3ytOwG3JSJiWXpVyJUoWTKoDMJaGtD96R6 SLdRsJXyELHS0pP7J5C27GPgQxGl+KYE8JgSbHpp8EWk1cJ/anOIA8BTyJhBmlCx 7pSV+SPgnaIyyb/ZAWh4EDdlNw4JTrfOfBLQeMPT55joiyeRck7CfMqzIt99oEZ9 G39SWsmJi+B6quldHDkS5ZLy7QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFJakWNmB I1U0uF2dEzt0PEEq0bklMB8GA1UdIwQYMBaAFKD6ZvaTSqKBPhofAHOVkMY1fUDa MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFGNTgwNC9DMjEzOEQ0MDUy QkYxMUVFOEU0NEFBMUJDNEY5QUUwMi9vUHBtOXBOS29vRS1HaDhBYzVXUXhqVjlR Tm8uY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL29QcG05cE5Lb29FLUdoOEFjNVdReGpWOVFOby5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFG NTgwNC9DMjEzOEQ0MDUyQkYxMUVFOEU0NEFBMUJDNEY5QUUwMi9vUHBtOXBOS29v RS1HaDhBYzVXUXhqVjlRTm8ubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCGh404yDugZpqbZGYu7/oDBD7yzVnXfo+yiJTN396F4Nntlf+kQlkH Fu+0mrQ7TLn5MWrdD4kOtZMGEWV1XbV1TNkzAbLTHtb3SKlTWTm5ghyuODmTAqxu ltYaGOT91dfukg9OUumBbrfbuNdIzRYA1/OmEGq4zeWl35tCl5DHq8OC5uVe/K1O GjX3KjuPjRFkUCFv1s6X9nn7mJUCmenZBdnxLk4AyGU4yp233GfsjNsAYo4l+0Hr 4A9HjxEoSCq3rSYrqRPs9nGNeV+jUFZj3+eMHqqat1vG0cH9MJc/0fyv3cSGhqrA pQacd8mHizF4BhT7rv8r/6h+SZgjk06P -----END CERTIFICATE-----Generated at Tue Nov 4 02:15:12 2025 by rpki-client